Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32342d3234203d3e20323635363735.roa
File:                     3134332e3235352e3130342e302f32342d3234203d3e20323635363735.roa (raw, json)
Hash identifier:          /UChkC9LWMCJQoxUjIFcZ3gEXUKYe1NmQczjprmegTk=
Subject key identifier:   F8:43:7A:22:AE:64:42:B7:70:77:65:79:C2:A0:DD:89:07:07:94:19
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       50D3D6E840BA91A1B2F50024E2D2D8A67CD3C085
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32342d3234203d3e20323635363735.roa
Signing time:             Tue 05 Mar 2024 18:00:16 +0000
ROA not before:           Tue 05 Mar 2024 17:55:16 +0000
ROA not after:            Tue 04 Mar 2025 18:00:16 +0000
asID:                     265675
IP address blocks:        143.255.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 02:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d3:d6:e8:40:ba:91:a1:b2:f5:00:24:e2:d2:d8:a6:7c:d3:c0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: Mar  5 17:55:16 2024 GMT
            Not After : Mar  4 18:00:16 2025 GMT
        Subject: CN=F8437A22AE6442B770776579C2A0DD8907079419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:9c:3b:3a:14:72:e3:8e:2b:3f:77:20:50:
                    57:83:2f:43:0c:19:6c:18:cc:b9:cc:5c:be:87:e4:
                    a2:2f:1c:f5:c1:31:c5:83:4e:64:32:9d:44:48:24:
                    1a:74:d6:3c:ac:32:99:67:b8:b1:84:4f:bb:25:b8:
                    85:49:25:1f:1b:f3:f8:8c:9b:2c:41:69:13:fb:70:
                    4d:ed:ae:6b:c6:21:ba:52:67:dc:6f:d9:f9:20:30:
                    70:10:ea:44:d3:1e:f6:88:ca:d6:31:bd:fb:e7:2b:
                    5f:86:84:92:c5:cc:71:ae:c1:e5:fc:61:8f:82:8a:
                    4b:2e:79:25:71:76:1a:a2:97:39:e5:e5:5d:50:e7:
                    ad:6a:ad:7d:8e:5f:aa:d6:31:03:d6:bf:bd:4a:28:
                    25:0f:45:15:04:7d:0b:16:b1:14:0e:4b:29:22:56:
                    4f:d3:ea:8e:15:d9:0f:fb:1f:3e:b0:b7:b6:8c:e4:
                    c1:56:8f:f8:ff:21:09:8d:e7:74:e0:53:f9:38:75:
                    21:be:b4:b1:8f:17:9d:35:2c:8b:e2:a8:5c:d9:a7:
                    05:b6:11:97:db:5e:46:98:d4:18:47:a3:69:86:6e:
                    28:83:71:3c:fc:45:13:7d:2d:d3:12:d0:c8:a4:ab:
                    79:7f:45:d2:2f:22:78:d0:5c:db:f2:d9:72:39:d8:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:43:7A:22:AE:64:42:B7:70:77:65:79:C2:A0:DD:89:07:07:94:19
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32342d3234203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:fa:e7:0d:b9:8a:dd:7b:ae:73:83:af:88:8b:d1:09:4a:
         27:48:60:c4:c9:f7:a9:02:7d:48:b3:a7:a5:23:d5:b1:67:7a:
         8d:61:d7:8c:a1:37:9c:b5:95:0c:2f:48:23:44:9e:d1:ec:2c:
         57:19:b8:ce:18:18:af:43:0b:48:f2:43:6c:09:6a:b6:55:34:
         b8:1f:ed:06:b6:a3:73:25:54:3e:bf:3f:6c:6c:6c:2f:84:69:
         cd:d5:ff:8d:ad:ea:bf:6c:ca:4b:b4:b7:1e:26:f8:37:a8:12:
         ee:79:a2:52:12:35:0f:0a:e4:1a:47:97:86:95:b2:b2:de:b5:
         99:e5:a3:85:84:39:b2:9e:c2:2b:7a:98:27:00:32:a8:d0:a0:
         a9:b9:99:d0:ab:8a:61:61:80:16:94:14:78:b7:43:c5:e5:10:
         94:b8:f4:99:02:5b:c5:4e:a7:80:01:e6:77:fe:62:7f:b4:bf:
         22:f1:dc:f5:b6:7d:bd:ec:1b:5d:a6:b0:d2:58:19:13:bc:27:
         85:04:9b:2f:86:c6:0f:21:b8:5f:79:a6:45:01:b4:d5:ec:96:
         68:2d:07:2a:25:72:d7:a3:be:9f:25:38:fb:22:c3:5e:06:c6:
         e9:ab:3f:96:78:91:9f:f4:85:af:2c:b9:d8:0a:c4:69:c7:aa:
         5e:61:c9:39
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUNPW6EC6kaGy9QAk4tLYpnzTwIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBQ0I0NUJFNzA2ODlDNUJEQ0QyRDlCRkNGRjAwMjAz
ODdGOTIxQzAeFw0yNDAzMDUxNzU1MTZaFw0yNTAzMDQxODAwMTZaMDMxMTAvBgNV
BAMTKEY4NDM3QTIyQUU2NDQyQjc3MDc3NjU3OUMyQTBERDg5MDcwNzk0MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8Zw7OhRy444rP3cgUFeDL0MM
GWwYzLnMXL6H5KIvHPXBMcWDTmQynURIJBp01jysMplnuLGET7sluIVJJR8b8/iM
myxBaRP7cE3trmvGIbpSZ9xv2fkgMHAQ6kTTHvaIytYxvfvnK1+GhJLFzHGuweX8
YY+CiksueSVxdhqilznl5V1Q561qrX2OX6rWMQPWv71KKCUPRRUEfQsWsRQOSyki
Vk/T6o4V2Q/7Hz6wt7aM5MFWj/j/IQmN53TgU/k4dSG+tLGPF501LIviqFzZpwW2
EZfbXkaY1BhHo2mGbiiDcTz8RRN9LdMS0Mikq3l/RdIvInjQXNvy2XI52AoZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU+EN6Iq5kQrdwd2V5wqDdiQcHlBkwHwYDVR0j
BBgwFoAU6ay0W+cGicW9zS2b/P8AIDh/khwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMjU2NDEzNTJEQURDNzNGNTQ4MzNDMUNEODYyMjZFNkQy
MjcxMzc4MkQ3QjA0NjY2Qzk3RDk0QjlENkNBOUE2LzAvRTlBQ0I0NUJFNzA2ODlD
NUJEQ0QyRDlCRkNGRjAwMjAzODdGOTIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOUFDQjQ1QkU3MDY4OUM1QkRD
RDJEOUJGQ0ZGMDAyMDM4N0Y5MjFDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjI1NjQxMzUyREFEQzczRjU0ODMzQzFDRDg2MjI2RTZEMjI3MTM3ODJE
N0IwNDY2NkM5N0Q5NEI5RDZDQTlBNi8wLzMxMzQzMzJlMzIzNTM1MmUzMTMwMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM3MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACP
/2gwDQYJKoZIhvcNAQELBQADggEBAHrt+ucNuYrde65zg6+Ii9EJSidIYMTJ96kC
fUizp6Uj1bFneo1h14yhN5y1lQwvSCNEntHsLFcZuM4YGK9DC0jyQ2wJarZVNLgf
7Qa2o3MlVD6/P2xsbC+Eac3V/42t6r9syku0tx4m+DeoEu55olISNQ8K5BpHl4aV
srLetZnlo4WEObKewit6mCcAMqjQoKm5mdCrimFhgBaUFHi3Q8XlEJS49JkCW8VO
p4AB5nf+Yn+0vyLx3PW2fb3sG12msNJYGRO8J4UEmy+Gxg8huF95pkUBtNXslmgt
Byolctejvp8lOPsiw14GxumrP5Z4kZ/0ha8sudgKxGnHql5hyTk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:05 2024 by rpki-client on console-fra.rpki-client.org